MFSA-2015-54 Buffer overflow when parsing compressed XML
MFSA-2015-55 Buffer overflow and out-of-bounds read while’à † † E€C †ž= Clt>
[227350] High CVE-2013-2841: Use-after-free in Pepper resource handling. Credit to Chamal de Silva.
[226696] High CVE-2013-2842: Use-after-free in widget¸ † † 4± I‚?‚ „ú+ †ž:3ww.mozilla.org/security/announce/2013/mfsa2013-2627¾À † † E€C †ž= Cd_negotiation and allow untrusted uploads to locations which have MultiViews enabled.
This issue was already fixed Äà † † E€C †ž= C
Also, with a carefully crafted NTLM challenge, a malicious server might cause fetchmail to read from a bad memory location, betraying confidential data. It is deemed hard, although Ë€ † † E€C †ž= Corts:
Input passed via the "file" GET parameter to /pivotx/ajaxhelper.php is not properly sanitised before being reÑ † † E€C †ž= Cs primarily intended for use when developing policy or I/O logging plugins. The sudo_debug() function contains a flaw where the program name is used as part of the format string pa×À † † E€C †ž= Cgain knowledge of, for example, server layout; a redirect to a file:// URL, for example, will tell an attacker whether a given file exists locally on the server.
AdditionÝà † † e €L _˜ †ž= dchive that is processed with a (1) locateName or (2) statName operation0421
If the client sends a packet which fails to decrypt on the server, the OpenSSL error queue is not properly flushed, whic»À † † 0 €. N† †ž9.al files.
The vulnerability is caused due to Opera not properly restricting the privileges of "javascript:" URLs when opened in e.g. new windows or framesÁà † † E€C †ž= C in Horde, which can be exploited by malicious people to conduct cross-site scripting attacks.
Input passed when setting the parent frame's page title via JavaScript iÈ€ † † € Jƒæ= †ž' Vulnerability
File Removal and Empty File Creation Vulnerability Information Disclosure Vulnerability cyrus-imapd 2.2.4 2.2.8ÔÀ † † ‡ M{ 0ƒÄT †|At>0.9.3Úà †Ÿ{† E€C †ž= C-26